At Motional, we are genuinely committed to helping you handle personal data responsibly and securely.
Under data protection laws such as the General Data Protection Regulation (GDPR), and guidance from supervisory authorities like the Information Commissioner's Office (ICO), the responsibility for completing a Data Protection Impact Assessment (DPIA) rests with the Data Controller - that is, the organisation that determines how and why personal data is being processed (i.e. you).
That said, you're not alone in the process!
Whilst (following the guidance mentioned above) we (the Data Processor) cannot complete DPIAs on behalf of our customers, we are happy to provide the supporting information you need. You’ll find it below in a format you can copy and paste into your documentation.